分享一下我2O的路由配置？

mzh

本帖最后由 mzh 于 2019-11-22 18:42 编辑

仅供参考

网卡部分
vmbr1是内部的网桥，这里给他添加了ipv6地址作为网管
[ol]

# network interface settings; autogenerated

# Please do NOT modify this file directly, unless you know what

# you're doing.

#

# If you want to manage parts of the network configuration manually,

# please utilize the 'source' or 'source-directory' directives to do

# so.

# PVE will preserve these directives, but will NOT read its network

# configuration from sourced files, so do not attempt to move any of

# the PVE managed interfaces into external files!

auto lo

iface lo inet loopback

iface enp1s0 inet manual

auto vmbr0

iface vmbr0 inet static

        address  51.158.*

        netmask  24

        gateway  51.158.*

        bridge-ports enp1s0

        bridge-stp off

        bridge-fd 0

auto vmbr1

iface vmbr1 inet static

        address  192.168.1.1

        netmask  24

        bridge-ports none

        bridge-stp off

        bridge-fd 0

iface vmbr1 inet6 static

        address  2001:bc8:*:c800::

        netmask  56

[/ol]复制代码


vmbr1的NAT转发
[ol]

iptables -t nat -A POSTROUTING -s '192.168.1.0/24' -o vmbr0  -j MASQUERA

[/ol]复制代码

添加一个新的ipv6地址到vmbr0
[ol]

ip -6 a a 2001:bc8:*:c800::cafe/56 dev vmbr0[/ol]复制代码

iptables转发内部端口
[ol]

iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 10689 -j DNAT --to 192.168.1.106::3389[/ol]复制代码

小鸡ipv6的外部访问
[ol]

ip -f inet6 neigh add proxy 2001:bc8:*:c800::cafe:103 dev vmbr0

ip -f inet6 route add 2001:bc8:*:c800::cafe:103 dev vmbr1[/ol]复制代码

lxc小鸡nat+ipv6的网卡设置，小鸡的ipv6是随便写的，我这里设置的尾数和小鸡编号一样



母鸡的vmbr1



这里要注意小鸡的ipv6和ipv4网关要和vmbr1对应

潜水看美女

收藏了，谢谢大佬

openos

谢谢，收藏一下

ApkB

3O机器全部添加上了公网IPv6地址，刷PT更是得心应手啊

zhujimi

这个可以收藏一波~

yanaxiao

收藏，感谢楼主分享。

stonesnake

多谢大佬，收藏了